using System; using System.Diagnostics; using System.Runtime.CompilerServices; using System.Runtime.InteropServices; using static System.Buffers.Binary.BinaryPrimitives; namespace PKHeX.Core; /// /// Logic related to Encrypting and Decrypting Pokémon entity data. /// public static class PokeCrypto { internal const int SIZE_1ULIST = 69; internal const int SIZE_1JLIST = 59; internal const int SIZE_1PARTY = 44; internal const int SIZE_1STORED = 33; internal const int SIZE_2ULIST = 73; internal const int SIZE_2JLIST = 63; internal const int SIZE_2PARTY = 48; internal const int SIZE_2STORED = 32; internal const int SIZE_2STADIUM = 60; internal const int SIZE_3CSTORED = 312; internal const int SIZE_3XSTORED = 196; internal const int SIZE_3PARTY = 100; internal const int SIZE_3STORED = 80; private const int SIZE_3HEADER = 32; private const int SIZE_3BLOCK = 12; internal const int SIZE_4PARTY = 236; internal const int SIZE_4STORED = 136; internal const int SIZE_4RSTORED = 164; // 4STORED + 0x1C bytes of extra data private const int SIZE_4BLOCK = 32; internal const int SIZE_5PARTY = 220; internal const int SIZE_5STORED = 136; //private const int SIZE_5BLOCK = SIZE_4BLOCK; internal const int SIZE_6PARTY = 0x104; internal const int SIZE_6STORED = 0xE8; private const int SIZE_6BLOCK = 56; // Gen7 Format is the same size as Gen6. internal const int SIZE_8STORED = 8 + (4 * SIZE_8BLOCK); // 0x148 internal const int SIZE_8PARTY = SIZE_8STORED + 0x10; // 0x158 private const int SIZE_8BLOCK = 80; // 0x50 internal const int SIZE_8ASTORED = 8 + (4 * SIZE_8ABLOCK); // 0x168 internal const int SIZE_8APARTY = SIZE_8ASTORED + 0x10; // 0x178 private const int SIZE_8ABLOCK = 88; // 0x58 internal const int SIZE_9STORED = SIZE_8STORED; internal const int SIZE_9PARTY = SIZE_8PARTY; private const int SIZE_9BLOCK = SIZE_8BLOCK; /// /// Positions for shuffling. /// private static readonly byte[] BlockPosition = { 0, 1, 2, 3, 0, 1, 3, 2, 0, 2, 1, 3, 0, 3, 1, 2, 0, 2, 3, 1, 0, 3, 2, 1, 1, 0, 2, 3, 1, 0, 3, 2, 2, 0, 1, 3, 3, 0, 1, 2, 2, 0, 3, 1, 3, 0, 2, 1, 1, 2, 0, 3, 1, 3, 0, 2, 2, 1, 0, 3, 3, 1, 0, 2, 2, 3, 0, 1, 3, 2, 0, 1, 1, 2, 3, 0, 1, 3, 2, 0, 2, 1, 3, 0, 3, 1, 2, 0, 2, 3, 1, 0, 3, 2, 1, 0, // duplicates of 0-7 to eliminate modulus 0, 1, 2, 3, 0, 1, 3, 2, 0, 2, 1, 3, 0, 3, 1, 2, 0, 2, 3, 1, 0, 3, 2, 1, 1, 0, 2, 3, 1, 0, 3, 2, }; /// /// Positions for unshuffling. /// internal static readonly byte[] blockPositionInvert = { 0, 1, 2, 4, 3, 5, 6, 7, 12, 18, 13, 19, 8, 10, 14, 20, 16, 22, 9, 11, 15, 21, 17, 23, 0, 1, 2, 4, 3, 5, 6, 7, // duplicates of 0-7 to eliminate modulus }; /// /// Shuffles a 232 byte array containing Pokémon data. /// /// Data to shuffle /// Block Shuffle order /// Size of shuffling chunks /// Shuffled byte array [MethodImpl(MethodImplOptions.AggressiveInlining)] public static byte[] ShuffleArray(ReadOnlySpan data, uint sv, int blockSize) { byte[] sdata = data.ToArray(); uint index = sv * 4; const int start = 8; for (int block = 0; block < 4; block++) { int ofs = BlockPosition[index + block]; var src = data.Slice(start + (blockSize * ofs), blockSize); var dest = sdata.AsSpan(start + (blockSize * block), blockSize); src.CopyTo(dest); } return sdata; } /// /// Decrypts a Gen8 pk byte array. /// /// Encrypted Pokémon data. /// Decrypted Pokémon data. /// Encrypted Pokémon data. public static byte[] DecryptArray8(Span ekm) { uint pv = ReadUInt32LittleEndian(ekm); uint sv = (pv >> 13) & 31; CryptPKM(ekm, pv, SIZE_8BLOCK); return ShuffleArray(ekm, sv, SIZE_8BLOCK); } /// /// Decrypts a Gen8 pk byte array. /// /// Encrypted Pokémon data. /// Decrypted Pokémon data. /// Encrypted Pokémon data. public static byte[] DecryptArray8A(Span ekm) { uint pv = ReadUInt32LittleEndian(ekm); uint sv = (pv >> 13) & 31; CryptPKM(ekm, pv, SIZE_8ABLOCK); return ShuffleArray(ekm, sv, SIZE_8ABLOCK); } /// /// Decrypts a Gen9 pk byte array. /// /// Encrypted Pokémon data. /// Decrypted Pokémon data. /// Encrypted Pokémon data. public static byte[] DecryptArray9(Span ekm) { uint pv = ReadUInt32LittleEndian(ekm); uint sv = (pv >> 13) & 31; CryptPKM(ekm, pv, SIZE_9BLOCK); return ShuffleArray(ekm, sv, SIZE_9BLOCK); } /// /// Encrypts a Gen8 pk byte array. /// /// Decrypted Pokémon data. public static byte[] EncryptArray8(ReadOnlySpan pk) { uint pv = ReadUInt32LittleEndian(pk); uint sv = (pv >> 13) & 31; byte[] ekm = ShuffleArray(pk, blockPositionInvert[sv], SIZE_8BLOCK); CryptPKM(ekm, pv, SIZE_8BLOCK); return ekm; } /// /// Encrypts a Gen8 pk byte array. /// /// Decrypted Pokémon data. public static byte[] EncryptArray8A(ReadOnlySpan pk) { uint pv = ReadUInt32LittleEndian(pk); uint sv = (pv >> 13) & 31; byte[] ekm = ShuffleArray(pk, blockPositionInvert[sv], SIZE_8ABLOCK); CryptPKM(ekm, pv, SIZE_8ABLOCK); return ekm; } /// /// Encrypts a Gen9 pk byte array. /// /// Decrypted Pokémon data. public static byte[] EncryptArray9(ReadOnlySpan pk) { uint pv = ReadUInt32LittleEndian(pk); uint sv = (pv >> 13) & 31; byte[] ekm = ShuffleArray(pk, blockPositionInvert[sv], SIZE_9BLOCK); CryptPKM(ekm, pv, SIZE_9BLOCK); return ekm; } /// /// Decrypts a 232 byte + party stat byte array. /// /// Encrypted Pokémon data. /// Decrypted Pokémon data. /// Encrypted Pokémon data. public static byte[] DecryptArray6(Span ekm) { uint pv = ReadUInt32LittleEndian(ekm); uint sv = (pv >> 13) & 31; CryptPKM(ekm, pv, SIZE_6BLOCK); return ShuffleArray(ekm, sv, SIZE_6BLOCK); } /// /// Encrypts a 232 byte + party stat byte array. /// /// Decrypted Pokémon data. public static byte[] EncryptArray6(ReadOnlySpan pk) { uint pv = ReadUInt32LittleEndian(pk); uint sv = (pv >> 13) & 31; byte[] ekm = ShuffleArray(pk, blockPositionInvert[sv], SIZE_6BLOCK); CryptPKM(ekm, pv, SIZE_6BLOCK); return ekm; } /// /// Decrypts a 136 byte + party stat byte array. /// /// Encrypted Pokémon data. /// Decrypted Pokémon data. public static byte[] DecryptArray45(Span ekm) { uint pv = ReadUInt32LittleEndian(ekm); uint chk = ReadUInt16LittleEndian(ekm[6..]); uint sv = (pv >> 13) & 31; CryptPKM45(ekm, pv, chk, SIZE_4BLOCK); return ShuffleArray(ekm, sv, SIZE_4BLOCK); } /// /// Encrypts a 136 byte + party stat byte array. /// /// Decrypted Pokémon data. /// Encrypted Pokémon data. public static byte[] EncryptArray45(ReadOnlySpan pk) { uint pv = ReadUInt32LittleEndian(pk); uint chk = ReadUInt16LittleEndian(pk[6..]); uint sv = (pv >> 13) & 31; byte[] ekm = ShuffleArray(pk, blockPositionInvert[sv], SIZE_4BLOCK); CryptPKM45(ekm, pv, chk, SIZE_4BLOCK); return ekm; } /// /// Decrypts a 136 byte + party stat byte array. /// /// Encrypted Pokémon data. /// Decrypted Pokémon data. public static byte[] DecryptArray4BE(ReadOnlySpan ekm) { uint pv = ReadUInt32BigEndian(ekm); uint sv = (pv >> 13) & 31; return ShuffleArray(ekm, sv, SIZE_4BLOCK); } /// /// Encrypts a 136 byte + party stat byte array. /// /// Decrypted Pokémon data. /// Encrypted Pokémon data. public static byte[] EncryptArray4BE(ReadOnlySpan pk) { uint pv = ReadUInt32BigEndian(pk); uint sv = (pv >> 13) & 31; return ShuffleArray(pk, blockPositionInvert[sv], SIZE_4BLOCK); } [MethodImpl(MethodImplOptions.AggressiveInlining)] private static void CryptPKM(Span data, uint pv, int blockSize) { const int start = 8; int end = (4 * blockSize) + start; CryptArray(data[start..end], pv); // Blocks if (data.Length > end) CryptArray(data[end..], pv); // Party Stats } [MethodImpl(MethodImplOptions.AggressiveInlining)] private static void CryptPKM45(Span data, uint pv, uint chk, int blockSize) { const int start = 8; int end = (4 * blockSize) + start; CryptArray(data[start..end], chk); // Blocks if (data.Length > end) CryptArray(data[end..], pv); // Party Stats } [MethodImpl(MethodImplOptions.AggressiveInlining)] public static void CryptArray(Span data, uint seed) { var reinterpret = MemoryMarshal.Cast(data); for (int i = 0; i < reinterpret.Length; i++) { seed = (0x41C64E6D * seed) + 0x00006073; var xor = (ushort)(seed >> 16); if (!BitConverter.IsLittleEndian) xor = ReverseEndianness(xor); reinterpret[i] ^= xor; } } /// /// Decrypts an 80 byte format Generation 3 Pokémon byte array. /// /// Encrypted data. /// Decrypted data. public static byte[] DecryptArray3(Span ekm) { Debug.Assert(ekm.Length is SIZE_3PARTY or SIZE_3STORED); uint PID = ReadUInt32LittleEndian(ekm); uint OID = ReadUInt32LittleEndian(ekm[4..]); uint seed = PID ^ OID; var toEncrypt = ekm[SIZE_3HEADER..SIZE_3STORED]; for (int i = 0; i < toEncrypt.Length; i += 4) { var span = toEncrypt.Slice(i, 4); var chunk = ReadUInt32LittleEndian(span); var update = chunk ^ seed; WriteUInt32LittleEndian(span, update); } return ShuffleArray3(ekm, PID % 24); } /// /// Shuffles an 80 byte format Generation 3 Pokémon byte array. /// /// Un-shuffled data. /// Block order shuffle value /// Un-shuffled data. private static byte[] ShuffleArray3(ReadOnlySpan data, uint sv) { byte[] sdata = data.ToArray(); uint index = sv * 4; for (int block = 0; block < 4; block++) { int ofs = BlockPosition[index + block]; var src = data.Slice(SIZE_3HEADER + (SIZE_3BLOCK * ofs), SIZE_3BLOCK); var dest = sdata.AsSpan(SIZE_3HEADER + (SIZE_3BLOCK * block), SIZE_3BLOCK); src.CopyTo(dest); } return sdata; } /// /// Encrypts an 80 byte format Generation 3 Pokémon byte array. /// /// Decrypted data. /// Encrypted data. public static byte[] EncryptArray3(ReadOnlySpan pk) { Debug.Assert(pk.Length is SIZE_3PARTY or SIZE_3STORED); uint PID = ReadUInt32LittleEndian(pk); uint OID = ReadUInt32LittleEndian(pk[4..]); uint seed = PID ^ OID; byte[] ekm = ShuffleArray3(pk, blockPositionInvert[PID % 24]); var toEncrypt = ekm.AsSpan()[SIZE_3HEADER..SIZE_3STORED]; for (int i = 0; i < toEncrypt.Length; i += 4) { var span = toEncrypt.Slice(i, 4); var chunk = ReadUInt32LittleEndian(span); var update = chunk ^ seed; WriteUInt32LittleEndian(span, update); } return ekm; } /// /// Gets the checksum of a 232 byte array. /// /// Decrypted Pokémon data. /// Offset at which the Stored data ends and the Party data starts. public static ushort GetCHK(ReadOnlySpan data, int partyStart) { ushort chk = 0; var span = data[0x08..partyStart]; for (int i = 0; i < span.Length; i += 2) chk += ReadUInt16LittleEndian(span[i..]); return chk; } /// /// Gets the checksum of a Generation 3 byte array. /// /// Decrypted Pokémon data. [MethodImpl(MethodImplOptions.AggressiveInlining)] public static ushort GetCHK3(ReadOnlySpan data) { ushort chk = 0; var span = data[0x20..SIZE_3STORED]; for (int i = 0; i < span.Length; i += 2) chk += ReadUInt16LittleEndian(span[i..]); return chk; } /// /// Decrypts the input data into a new array if it is encrypted, and updates the reference. /// /// Generation 3 Format encryption check which verifies the checksum public static void DecryptIfEncrypted3(ref byte[] pk) { ushort chk = GetCHK3(pk); if (chk != ReadUInt16LittleEndian(pk.AsSpan(0x1C))) pk = DecryptArray3(pk); } /// /// Decrypts the input data into a new array if it is encrypted, and updates the reference. /// /// Generation 4 & 5 Format encryption check which checks for the unused bytes public static void DecryptIfEncrypted45(ref byte[] pk) { var span = pk.AsSpan(); if (ReadUInt32LittleEndian(span[0x64..]) != 0) pk = DecryptArray45(span); } /// /// Decrypts the input data into a new array if it is encrypted, and updates the reference. /// /// Generation 6 & 7 Format encryption check public static void DecryptIfEncrypted67(ref byte[] pk) { var span = pk.AsSpan(); if (ReadUInt16LittleEndian(span[0xC8..]) != 0 || ReadUInt16LittleEndian(span[0x58..]) != 0) pk = DecryptArray6(span); } /// /// Decrypts the input data into a new array if it is encrypted, and updates the reference. /// /// Generation 8 Format encryption check public static void DecryptIfEncrypted8(ref byte[] pk) { var span = pk.AsSpan(); if (ReadUInt16LittleEndian(span[0x70..]) != 0 || ReadUInt16LittleEndian(span[0x110..]) != 0) pk = DecryptArray8(span); } /// /// Decrypts the input data into a new array if it is encrypted, and updates the reference. /// /// Generation 8 Format encryption check public static void DecryptIfEncrypted8A(ref byte[] pk) { var span = pk.AsSpan(); if (ReadUInt16LittleEndian(span[0x78..]) != 0 || ReadUInt16LittleEndian(span[0x128..]) != 0) pk = DecryptArray8A(span); } /// /// Decrypts the input data into a new array if it is encrypted, and updates the reference. /// /// Generation 9 Format encryption check public static void DecryptIfEncrypted9(ref byte[] pk) { var span = pk.AsSpan(); if (ReadUInt16LittleEndian(span[0x70..]) != 0 || ReadUInt16LittleEndian(span[0x110..]) != 0) pk = DecryptArray9(span); } }